Host Agent CVE-2020-6234

A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL proto

The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values fo

SAP CommonCryptoLib does not perform necessary authentication checks, which may result in missing or wrong authorization

SAP startservice - of SAP NetWeaver Application Server ABAP, Application Server Java, ABAP Platform and HANA Database -

In SAP Host Agent (SAPOSCOL) - version 7.22, an attacker may use files created by saposcol to escalate privileges for th

An attacker authenticated as a non-admin user with local access to a server port assigned to the SAP Host Agent (Start S

SAP Hostcontrol does not require authentication for the SOAP SAPControl endpoint. Rated high severity (CVSS 7.5), this v

SAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open port causes a

SAP Host Agent, version 7.21, allows an attacker to cause a slowdown in processing of username/password-based authentica

SAP Host Agent (SAPOSCOL) - version 7.22, allows an unauthenticated attacker with network access to a server port assign

An attacker who gains local membership to sapsys group could replace local files usually protected by privileged access.

In SAP Host Agent (Windows) - versions 7.21, 7.22, an attacker who gains local membership to SAP_LocalAdmin could be abl